This paper reviews how vehicles may collect and allow access to consumer’s Personal Information (PI) and the legal implications, issues, and action automotive dealerships, banks, auto finance companies, credit unions, and other financing sources, but also insurance companies, rental car, and fleet companies should consider. The paper describes the main types of PI collected by vehicles, and how this information is regulated at the federal and state level, and lists a number of legal precedents in courts, including 9-figure settlements.